CaseCore
6.7#69 in case management softwareFrom $39 a monthWeb
VisitCaseCore vs DFIR-IRIS
What both publish
| Fact | CaseCore | DFIR-IRIS |
|---|---|---|
| Deployment | cloud | The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths. |
| Free plan | No | Yes |
| Integrations | The integrations page lists supported paths for QuickBooks Online, Xero, Stripe, Gmail and Google Calendar, Outlook and Microsoft Calendar, IRBsearch, and PI Point, with setup or authorization requirements that vary. | First-party modules include IrisVT for VirusTotal, IrisMISP for MISP, IrisCheck for validations and IrisWebHooks for URL destinations. |
| Purpose | CaseCore connects cases, evidence, reports, process service and billing in one workspace for investigative agencies. | DFIR-IRIS is an open-source incident response platform for running investigations collaboratively in one workspace. |
CaseCore plans
- Independent Investigator$39 a month
- Process Service$49 a month
- Solo$65 a month
- Starter$95 a month
- Professional$159 a month
- Agency$249 a month
DFIR-IRIS plans
- Free and open-sourceFree
- Open-source self-hostedFree
Pick CaseCore if…
You want what its maker publishes above — check its page for the details.
Pick DFIR-IRIS if…
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.